Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 210 of 437.
- CVE-2022-46059 Cross-site request forgery in aerocms project:aerocms
- CVE-2022-46058 Cross-site scripting in aerocms project:aerocms
- CVE-2022-46051 SQL injection in aerocms project:aerocms
- CVE-2022-4605 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- CVE-2022-46047 SQL injection in aerocms project:aerocms
- CVE-2022-4604 wp-english-wp-admin Plugin english-wp-admin.php register_endpoints cross-site request forgery
- CVE-2022-4603 ppp pppdump pppdump.c dumpppp array index
- CVE-2022-46025 Missing authorization in totolink:n200re v5 firmware
- CVE-2022-46021 SQL injection in x-man project:x-man
- CVE-2022-46020 File upload in wbce:wbce cms
- CVE-2022-4602 Shoplazza LifeStyle Review Flow cross site scripting
- CVE-2022-4601 Shoplazza LifeStyle Shipping/Member Discount/Icon cross site scripting
- CVE-2022-4600 Shoplazza LifeStyle Product Carousel cross site scripting
- CVE-2022-45997 Memory corruption in tenda:w20e firmware
- CVE-2022-45996 Command injection in tenda:w20e firmware
- CVE-2022-45995 Memory corruption in tenda:ax12 firmware
- CVE-2022-45990 Cross-site scripting in ecommerce-website project:ecommerce-website
- CVE-2022-4599 Shoplazza LifeStyle Product cross site scripting
- CVE-2022-45988 Privilege escalation in starsoftcomm:coocare
- CVE-2022-45982 Deserialization of Untrusted Data in thinkphp
- CVE-2022-45980 Cross-site request forgery in tenda:ax12 firmware
- CVE-2022-4598 Shoplazza LifeStyle Announcement cross site scripting
- CVE-2022-45979 Memory corruption in tenda:ax12 firmware
- CVE-2022-45977 Command injection in tenda:ax12 firmware
- CVE-2022-45970 Alist Cross-site Scripting vulnerability
- CVE-2022-4597 Shoplazza LifeStyle Create Product v2_products cross site scripting
- CVE-2022-45969 Alist vulnerable to Path Traversal
- CVE-2022-45968 AList vulnerable to Improper Preservation of Permissions
- CVE-2022-45966 File upload in classcms project:classcms
- CVE-2022-45963 Privilege escalation in h3c:secpath f100-c-g3 firmware
- CVE-2022-45962 SQL injection in os4ed:opensis
- CVE-2022-4596 Shoplazza Add Blog Post cross site scripting
- CVE-2022-45957 Memory corruption in zte:zxhn-h108ns firmware
- CVE-2022-45956 Auth bypass in boa:boa
- CVE-2022-4595 django-openipam exposed_hosts.html cross site scripting
- CVE-2022-45942 Command injection in baijiacms project:baijiacms
- CVE-2022-4594 drogatkin TJWS2 WarRoller.java deployWar path traversal
- CVE-2022-45939 Command injection in debian:debian linux
- CVE-2022-45938 Cross-site scripting in xfinity:comcast defined technologies microeisbss
- CVE-2022-45937 Information disclosure in APOGEE PXC Compact (BACnet)
- CVE-2022-45936 Missing authorization in Mendix Email Connector
- CVE-2022-45935 Apache James server: Temporary File Information Disclosure
- CVE-2022-45934 Integer overflow in debian:debian linux
- CVE-2022-45933 KubeView vulnerable to full cluster takeover due to improper authentication
- CVE-2022-45932 SQL injection in linuxfoundation:opendaylight
- CVE-2022-45931 SQL injection in linuxfoundation:opendaylight
- CVE-2022-45930 SQL injection in linuxfoundation:opendaylight
- CVE-2022-4593 retra-system cross site scripting
- CVE-2022-45929 Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change
- CVE-2022-45928 Code injection in opentext:opentext extended ecm
- CVE-2022-45927 Auth bypass in opentext:opentext extended ecm
- CVE-2022-45926 Server-side request forgery in opentext:opentext extended ecm
- CVE-2022-45925 Information disclosure in opentext:opentext extended ecm
- CVE-2022-45924 Missing authorization in opentext:opentext extended ecm
- CVE-2022-45923 Memory corruption in opentext:opentext extended ecm
- CVE-2022-45922 Auth bypass in opentext:opentext extended ecm
- CVE-2022-45921 FusionAuth vulnerable to directory traversal attack
- CVE-2022-45920 Denial of service in softing:uatoolkit embedded
- CVE-2022-4592 luckyshot CRMx index.php commentdelete sql injection
- CVE-2022-45919 Use after free in linux:linux kernel
- CVE-2022-45918 Path traversal in ilias:ilias
- CVE-2022-45917 ILIAS before 7.16 has an Open Redirect.
- CVE-2022-45916 ILIAS before 7.16 allows XSS.
- CVE-2022-45915 Command injection in ilias:ilias
- CVE-2022-45914 Auth bypass in electronic shelf label protocol project:electronic shelf label protocol
- CVE-2022-45913 Cross-site scripting in zimbra:collaboration
- CVE-2022-45912 File upload in zimbra:collaboration
- CVE-2022-45911 Cross-site scripting in zimbra:collaboration
- CVE-2022-45910 Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities
- CVE-2022-4591 mschaef toto Email Parameter cross site scripting
- CVE-2022-45909 Memory corruption in drachtio:drachtio-server
- CVE-2022-45908 PaddlePaddle vulnerable to code injection via winstr
- CVE-2022-45907 PyTorch vulnerable to arbitrary code execution
- CVE-2022-4590 mschaef toto Todo List cross site scripting
- CVE-2022-45899 Command injection in nokia:broadcast message center
- CVE-2022-45897 Information disclosure in xerox:workcentre 3550 firmware
- CVE-2022-45896 File upload in planetestream:planet estream
- CVE-2022-45895 Information disclosure in planetestream:planet estream
- CVE-2022-45894 Path traversal in planetestream:planet estream
- CVE-2022-45893 Auth bypass in planetestream:planet estream
- CVE-2022-45892 Cross-site scripting in planetestream:planet estream
- CVE-2022-45891 Missing authorization in planetestream:planet estream
- CVE-2022-45890 Cross-site scripting in planetestream:planet estream
- CVE-2022-4589 cyface Terms and Conditions Module views.py returnTo redirect
- CVE-2022-45889 SQL injection in planetestream:planet estream
- CVE-2022-45888 Use after free in linux:linux kernel
- CVE-2022-45887 Denial of service in linux:linux kernel
- CVE-2022-45886 Use after free in linux:linux kernel
- CVE-2022-45885 Use after free in linux:linux kernel
- CVE-2022-45884 Use after free in linux:linux kernel
- CVE-2022-4588 Boston Sleep slice Layout cross site scripting
- CVE-2022-45877 Weak cryptography in OpenHarmony
- CVE-2022-45876 CVE-2022-45876
- CVE-2022-45875 Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin
- CVE-2022-45874 Missing authorization in Aslan-AL10
- CVE-2022-45873 Denial of service in fedoraproject:fedora
- CVE-2022-45872 Other in iterm2:iterm2
- CVE-2022-45871 Denial-of-Service (DoS) Vulnerability
- CVE-2022-4587 Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting
- CVE-2022-45869 Race condition in linux:linux kernel